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AMENDMENTS TO THE CLAIMS 

Pursuant to 37 CFR § 1.111, please amend the claims as shown below. This Listing of 
the Claims replaces all previous versions and listings thereof. 

1. (Currently Amended) A machine-implemented method for managing access to data, the 
method comprising the steps of: 

registering with a database server a policy function supplied by a user; 

said database server detecting that a database command requires access to columns a 

particular combination of information that is locat e d in at least two tables; and 

in response to the step of detecting:^,]] 

said database server invoking of said policy function to generate a condition expression 
returned by the policy function; 



rewriting said database command by creating a modified database command to 
incorporate said condition expression, based on the database command. 

if th e particular combination i s a combination to which acc e ss is limit e d, r e writing 
said database command by cr e ating a modifi e d database command, bas e d 
on the databas e command. 



invoked trigg e r e d by detecting that a database command requires access to a subset of tables of the 
at least two tables, wherein the subset of tables includes at least one table. 



and 



2-3. (Cancelled) 



4. (Currently Amended) 



The method of claim I [[2]], wherein the policy function is not 
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5-6. (Cancelled) 

7. (Currently Amended) The method of claim I [[6]], wherein the detecting includes detecting 
that metadata defines the particular combination of columns as a combination of columns to which 
access is controlled. 

8. (Currently Amended) The method of claim 1, further comprising the step of registering a 
policy function with a polic y, wh e rein th e policy function returns a condition e xpr e ssion, and th e 
modified database command is bas e d on th e condition expression and th e database command . 

9. (Currently Amended) The method of claim 8, wherein the policy includes metadata 
identifying the columns that are includ e d in th e particular combination of information . 

10. (Currently Amended) A machine-readable medium carrying one or more sequences of 
instructions, which when executed by one or more processors, causes the one or more processors to 
perform a method comprising the steps of: 

registering with a database server a policy function supplied by a user; 

said database server detecting that a database command requires access to a particular combination of 
information that is located in at least two tables; and 
in response to the step of detecting: [[,]] 

said database server invoking of said policy to a generate of a condition expression returned 
by the policy function; 

and 

rewriting said database command by creating a modified database command to 

incorporate said condition expression, based on the database command. 
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if th e particular combination is a combination to which acc e ss is limit e d, r e writing 
said databas e command by cr e ating a modifi e d databas e command, bas e d 
on the databas e command. 

11-12. (Cancelled) 

13. (Currently Amended) The machine readable medium of claim 10 [[11]], wherein the policy 
function is not invoked trigg e r e d by detecting that a database command requires access to a subset 
of tables of the at least two tables, wherein the subset of tables includes at least one table. 

14-15. (Cancelled) 

16. (Currently Amended) The machine readable medium of claim 10 [[15]], wherein the 
detecting includes detecting that metadata defines the particular combination of columns as a 
combination of columns to which access is controlled. 

17. (Currently Amended) The machine readable medium of claim 10, wherein the method 
further comprises the step of registering a policy function with a polic y, wh e r e in th e policy 
function returns a condition e xpr e ssion, and the modifi e d database command is bas e d on th e 
condition e xpr e ssion and th e database command . 

1 8. (Currently Amended) The machine readable medium of claim 17, wherein the policy 
includes metadata identifying the columns that are includ e d in th e particular combination of 
information . 
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